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IN THE CLAIMS 
Please amend the claims as follows: 

Claim 1 (Currently Amended): A method for storing and enabling access to data at a 
server , the method comprising: 

obtaining receiving a hint at the server from a first device, the hint generated by 
executable code located on the first device ; 

obtaining a password; 

receiving, at the server, data encrypted by using a key, the key generated by 
performing a hashing algorithm on the hint and [[the]] a password to g e n e rat e a k e y ; 
e ncrypting data using th e k e y; 

sending th e e ncrypted data to a s e rver for storag e ; and 
sending the hint to a e&eftt -second device . 

Claim 2 (Original): The method of claim 1, wherein the step of performing a hashing 
algorithm includes hashing the password. 

Claim 3 (Currently Amended): A method for storing and enabling access to data at a 
server , the method comprising: 

obtaining receiving a hint at the server from a first device, the hint generated by 
executable code located on the first device : and 

obtaining a password; 

receiving, at the server, data encrypted by using a key, the key generated by 
performing a hashing algorithm on the hint and [[the] a password to g e n e rat e a k e y , wherein 
th e st e p of 
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performing [[a]] the hashing algorithm includes hashing the password to derive a first 
secret, hashing the first secret to derive a second secret, hashing the hint and the first secret to 
generate an intermediate index, and hashing the intermediate index and the second secret to 
generate the keyt 

e ncrypting data using th e k e y; and 

s e nding th e e ncrypt e d data to a s e rv e r for storag e. 

Claim 4 (Currently Amended): A system, comprising: 

a user interface for obtaining configured to obtain a password; 

a key generator coupled to the user interface for p e rforming configured to perform a 
hashing algorithm on a hint and the password to generate a key; 

an encryption engine coupled to the key generator for e ncrypting configured to 
encrypt data stored on a device using the key; 

a communications module coupled to the encryption engine for s e nding configured to 
send the encrypted data and the hint to a server for storage. 

Claim 5 (Currently Amended): The system of claim 4, further comprising: 
a hint generator for g e n e rating configured to generate the hint. 

Claim 6 (Original): The system of claim 4, wherein the key generator hashes the 
password. 

Claim 7 (Currently Amended): A system, comprising: 

a user interface for obtaining configured to obtain a password; 
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a key generator coupled to the user interface for p e rforming configured to perform a 
hashing algorithm on a hint and the password to generate a key wherein the key generator 
hashes the password to derive a first secret, hashes the first secret to derive a second secret, 
hashes the hint and the first secret to generate an intermediate index, and hashes the 
intermediate index and the second secret to generate the key; 

an encryption engine coupled to the key generator for e ncrypting configured to 
encrypt data stored on a device using the key; and 

a communications module coupled to the engine for s e nding configured to send the 
encrypted data to a server for storage. 

Claim 8 (Currently Amended): A system, comprising: 
means for obtaining a hint; 

means for obtaining a password through and interface to executable code transmitted 
to a device ; 

means for performing a hashing algorithm on the hint and the password to generate a 

key; 

means for encrypting data stored on the device using the key; and 
means for sending the encrypted data to a server for storage^-and 
m e ans for s e nding th e hint to a cli e nt . 

Claim 9 (Currently Amended): The system of claim 8, wherein the system includ e s 
executable code is stored on a computer-readable storage medium. 

Claim 10 (Currently Amended): The system of claim 8, wherein the system includes 
is configured to transmit the executable code embodied in a carrier wave. 
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Claim 11 (Currently Amended): A method for storing and enabling access to data at 
a server , the method comprising: 

receivin g, at the server, a request to store encrypted data from a ehentdevice; 
sending a r e qu e st to stor e e ncrypt e d data from a cli e nt; 

sending an encryption downloadable to the device for deriving a key to encrypt data 
to th e cli e nt stored at the device ; 

receivin g, at the server, encrypted data that was encrypted by the encryption 
downloadable from the cli e nt device ; and 

obtaining receiving, from the device, a hint, corresponding to the encrypted data and 
n ee d e d used for regenerating the key; and 

storing the hint and the encrypted data at the server . 

Claim 12 (Currently Amended): A system, comprising: 

an encryption downloadable for d e riving configured to derive an encryption key from 
a password and a hint; 

a web server for int e rfacing configured to interface with a client, for s e nding device 
and send the encryption downloadable to the eMeni- device , and for r e c e iving e ncrypted 
receive data that was encrypted by the encryption downloadable from the elieftt -device ; and 

a memory coupled to the web server for storing configured to store a hint 
corresponding to the encrypted data and n ee d e d used to regenerate the key from the client 
and the encrypted data. 
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Claim 13 (Currently Amended): A method, comprising; 

obtaining a password; 

sending receiving, at a device, encrypted data and a hint corresponding to the 

encrypted data from a serve r to a cli e nt ; and 

inputting a password through an interface to executable code; and 

performing a hashing algorithm on the password and the hint at the eJient-device to 

generate a key for decrypting the encrypted data. 

Claim 14 (Currently Amended): The method of claim 13, wherein th e st e p of 
performing [[a]] the hashing algorithm further includes hashing the password. 

Claim 15 (Currently Amended): [[a]] A system, comprising: 

a user interface for obtaining configured to obtain a password; 

a communication module for s e nding configured to send encrypted data and a hint 
corresponding to the encrypted data from a server to a ehen ^device ; and 

a key generator for performing a hashing algorithm on the password and the hint at 
the ehent-deyice to generate a key for decrypting the encrypted data. 

Claim 16 (Currently Amended): A system, comprising: 

means for obtaining a password through an interface to executable code transmitted to 
a device ; 

means for sending encrypted data and a hint corresponding to the encrypted data from 
a server to a cli e nt the device ; and 

means for performing a hashing algorithm on the password and the hint at the cli e nt 
device to generate a key for decrypting the encrypted data. 
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Claim 17 (Currently Amended): The system of claim 16, wherein the syst e m 
includ e s executable code is stored on a computer-readable storage medium. 

Claim 18 (Currently Amended): The system of claim 16, wherein the system 
includ e s is configured to transmit the executable code embodied in a carrier wave. 

Claim 19 (Currently Amended): A method, comprising: 

receiving id e ntification of information identifying encrypted data stored at a server ; 
sending a decryption downloadable ier -to a device, the decryption downloadable 
deriving a key from a password and a hint to a client ; 

sending [[a]] the hint corresponding to the encrypted data to the cli e nt; and device; 

and 

deriving the key by hashing at least one of the hint and the password. 
Claim 20 (Currently Amended): A system, comprising: 

a decryption downloadable for d e riving configured to derive a key by hashing at least 
one of a password and a hint; 

a memory configured to store encrypted data[[;]] and a hint corresponding to the 
encrypted data; and 

a web server for int e rfacing configured to interface with a cli e nt the device , and fef 
sending send the decryption downloadable, the encrypted data i and the hint to the client. 
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Claim 21 (Currently Amended): A elient-device based method, comprising: 

obtaining a password through an interface to executable code transmitted to the 

device ; 

deriving a first secret from the password; 

receiving a hint corresponding to data to be decrypted from a server; 
deriving an intermediate index from the first secret and the hint; and 
sending the intermediate index to the serve r, the intermediate index used to decrypt 
data stored on the server . 

Claim 22 (Currently Amended): The method of claim 21, wherein deriving the first 
secret further includes hashing the password. 

Claim 23 (Currently Amended): The method of claim 2 1 , wherein deriving an 
intermediate index further includes hashing the first secret and the hint. 

Claim 24 (Currently Amended): A system, comprising: 

a user interface for obtaining configured to obtain a password; 

an index generator coupled to the user interface for g e nerating configured to generate 
an intermediate index from a hint received from a server and a secret derived from the 
password; and 

a communications engine coupled to the index generator for s e nding configured to 
send the intermediate index to the server. 
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Claim 25 (Currently Amended): The system of claim 24, wherein the index 

generator is further configured to generate the intermediate index by hashing the hint and the 

secret. 

Claim 26 (Currently Amended): A system, comprising; 

means for obtaining a password through an interface to executable code transmitted to 
a device ; 

means for deriving a first secret from the password; 

means for receiving a hint corresponding to data to be decrypted from a server; 
means for deriving an intermediate index from the first secret and the hint; and 
means for sending the intermediate index to the serve r, the intermediate index used to 
decrypt data stored at the server . 

Claim 27 (Currently Amended): The system of claim 26, wherein the system 
includ e s the executable code is stored on a computer-readable storage medium. 

Claim 28 (Currently Amended): The system of claim 26, wherein the system 
includ e s is configured to transmit the executable code embodied in a carrier wave. 

Claim 29 (Currently Amended): A server-based method, comprising; 

receiving an indication of encrypt e d data to b e d e crypt e d from a device, a request for 
access to data stored at a server ; 

transmitting to a cli e nt the device a hint corresponding to the indication data , and a 
decryption downloadable for deriving an intermediate index from a password and the hint; 

receiving the intermediate index from the ehenfc -device ; and 
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deriving a decryption key from a second secret corresponding to the Mseg -device and 

the intermediate index. 

Claim 30 (Currently Amended): A system, comprising; 

a memory configured to store a second secret corresponding to a user -device ; 

a decryption downloadable for g e n e rating configured to generate an intermediate 
index from a password and a hint; 

a web server for r e c e iving an indication of configured to receive information 
identifying encrypted data to be decrypted, for transmitting transmit the decryption 
downloadable and a hint corresponding to the indication to a client the device , and fer 
r e c e iving receive an intermediate index from the elient-device; and 

a server-resident module for d e riving configured to derive a key for decrypting the 
encrypted data from the second secret and the intermediate index. 
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